Data Broker Accountability and Transparency Act

Data Broker Accountability and Transparency Act - Prohibits a data broker from obtaining or causing to be disclosed personal information or any other information relating to any person by making a false, fictitious, or fraudulent statement or representation to any person, including by providing to any person any document that the data broker knows or should know to be forged, counterfeit, lost, stolen, or fraudulently obtained or that contains a false, fictitious, or fraudulent statement or representation.

Defines "data broker" as a commercial entity that collects, assembles, or maintains personal information concerning an individual who is not a customer or an employee in order to sell, or provide third-party access to, such information.

Requires data brokers to establish procedures to ensure the accuracy of the personal information they collect, assemble, or maintain and of any other information that specifically identifies an individual, unless the information identifies only names or addresses.

Exempts from such requirements information that may be inaccurate if it is collected or maintained solely to: (1) indicate whether there may be a discrepancy or irregularity in the personal information associated with an individual; (2) identify or authenticate the identity of an individual; or (3) protect against or investigate fraud or other unlawful conduct.

Requires data brokers to provide individuals a means to review certain information collected, assembled, or maintained on such individuals, unless a regulatory exception promulgated by the Federal Trade Commission (FTC) applies.

Requires data brokers to maintain an Internet website that instructs individuals how to: (1) review their information, and (2) express a preference with respect to the use of their personal information for marketing purposes.

Permits individuals to dispute the accuracy of their information with a written request that the data broker make a correction.

Requires a data broker, with regard to disputed public record information, to: (1) inform the individual of the source of the information and, if reasonably available, where to direct the individual's request for correction; or (2) correct the inaccuracy in the data broker's records if the individual provides proof that the public record has been corrected or that the data broker was reporting the information incorrectly.

Defines "public record information" as information obtained originally from records of a federal, state, or local government entity that are available for public inspection.

Requires a data broker, with regard to disputed non-public information, to: (1) note the information that is disputed, (2) use reasonable procedures to independently verify the information, and (3) correct the inaccuracy in the data broker's records if the data broker was reporting the information incorrectly.

Requires data brokers that use, share, or sell certain information for marketing purposes to provide individuals a reasonable means of expressing a preference to exclude their information from being used for such purposes.

Sets forth the authority of the FTC and states to enforce this Act.

Written by the nonpartisan Congressional Research Service. All summary versions on Congress.gov